Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-1703_x64 -
resource
win10-20231129-en -
resource tags
-
submitted
03-12-2023 17:39
General
-
Target
5b24e9dd633f1a3e33a1709c844b5a024cc3b64b2295758664ee74a2b7b64d7d.exe
-
Size
5KB
-
MD5
18504fb9ba59f471213e6ca3703e1cd6
-
SHA1
61a1f2feda35fd3dccd9b2e50ebe4c4bb131a3c8
-
SHA256
5b24e9dd633f1a3e33a1709c844b5a024cc3b64b2295758664ee74a2b7b64d7d
-
SHA512
d719a2c0631371b6aa89999e99e9ed5f235b3df17f649376d3298a73ab3a7b717a33f9cbcf01a564279de868eb7f5fd10e24ce7aad1256cdbf0b045d259edf3d
-
SSDEEP
48:6UkYEJRdmjkXAhwnKpfezwK3UD1qtPRadTCl1Ni7Yq7VpnBs9tiOlF4qFqpfbNtm:MYqdBAynufe3UqtQTI1MD693ozNt
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
http://verifycleansecurity.com/seven/Rpbqrknhea.pdf
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5b24e9dd633f1a3e33a1709c844b5a024cc3b64b2295758664ee74a2b7b64d7d.exe"C:\Users\Admin\AppData\Local\Temp\5b24e9dd633f1a3e33a1709c844b5a024cc3b64b2295758664ee74a2b7b64d7d.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
9.9MB
-
Filesize
64KB
-
Filesize
9.9MB
-
Filesize
64KB